Expose them publically? Because that would you get you in trouble with your job at nearly every company. Expose them within the company? Only works if your man

Expose them publically? Because that would you get you in trouble with your job at nearly every company. Expose them within the company? Only works if your management supports you, and they are probably only doing a security audit so they can get a piece of paper with some initials on it. They just want it to go away, not to hire another auditor to start from scratch.